server/AyaNova/Controllers/AuthController.cs

@@ -665,7 +665,7 @@ namespace AyaNova.Api.Controllers
             }
 
           
-            var u = await ct.User.FirstOrDefaultAsync(z => z.Id == UserId);
+            var u = await ct.User.FirstOrDefaultAsync(z => z.Id == id);
             if (u == null)//should never happen but ?
                 return StatusCode(403, new ApiNotAuthorizedResponse());
 

server/AyaNova/models/User.cs

@@ -29,7 +29,7 @@ namespace AyaNova.Models
         public string Wiki { get; set; }
         public string CustomFields { get; set; }
         public List<string> Tags { get; set; }
-
+        public bool TwoFactorEnabled { get; set; }
         public DateTime? LastLogin { get; set; }
 
         [NotMapped, JsonIgnore]